On January 23, 2025, Sawley Lock O’Callaghan, a South Australian land surveying and spatial information company, appeared on the leak site of the dragonforce ransomware group. The listing states that internal files were exfiltrated during a ransomware attack, although the exact number of people whose personal information may be contained in those files remains unknown.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Sawley Lock O'Callaghan
Get alerted the next time Sawley Lock O'Callaghan files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Sawley Lock O'Callaghan’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting on the dragonforce leak site indicates that Sawley Lock O’Callaghan’s internal documents were stolen and are now listed for potential release. The company provides land surveying services across a wide range of applications and has been operating for years in South Australia. No confirmed total of affected records or specific data fields has been published, but ransomware incidents of this type routinely expose employee details, client information, correspondence, and project files. The listing carries the usual extortion timeline typical of the group, although exact deadlines have not been independently verified in open sources.
Why This Matters for You and Your Family
When a company like a surveying firm is breached, the information stolen can include names, addresses, phone numbers, email accounts, and sometimes dates of birth or government identifiers tied to land titles, property surveys, or service contracts. If your family has ever used a surveying or spatial information service in South Australia, your details could be among the records now held by attackers. Even if you are not a direct client, employees’ personal data is frequently caught in these leaks, which means everyday families suddenly find themselves at risk of identity theft, phishing, or unwanted contact. Credential leaks from corporate networks often spread far beyond the original victim company.
The Doxxing and Identity-Chain Implications
Ransomware groups do not always stop at posting generic files. Once internal documents surface, opportunistic criminals scrape them for personal details that can be combined with other breaches. A single email address or phone number found in a surveying company’s files can be linked to your social-media handles, children’s school records, or online gaming accounts. These connections create an identity chain that makes doxxing easier and faster. Public reporting shows that data exposed in one breach frequently appears in follow-on attacks within weeks. Children’s gaming accounts are especially vulnerable because parents often reuse passwords or email addresses across work-related services and family entertainment platforms.